Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File:                     0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier:          jGH/FRvvJ5lad1VJUHHjryzwO/NhUFJnvFu2s7Ou1aw=
Subject key identifier:   99:78:FC:8B:45:95:45:E4:C5:EF:8B:88:DD:6F:AF:43:64:BB:47:D6
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer:       /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial:       01A0C58E6DC3B8C9107F19090A17E425B36F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number:          0A26
Signing time:             Mon 21 Sep 2026 20:00:40 +0000
Manifest this update:     Mon 21 Sep 2026 20:00:40 +0000
Manifest next update:     Tue 22 Sep 2026 20:00:40 +0000
Files and hashes:         1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: ZLZcRG0LiH7VEn13ropeXGD2hCowmgJN5sUYcDKOEBU=)
                          2: JNb8qAOe82PBo3QGsaNX-y91s-c.roa (hash: N4b3iRyhTXcqX/rj0VSG64RSyTYz/SivUVU9/ij649s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:8e:6d:c3:b8:c9:10:7f:19:09:0a:17:e4:25:b3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
        Validity
            Not Before: Sep 21 20:00:40 2026 GMT
            Not After : Sep 22 20:00:40 2026 GMT
        Subject: CN=9978fc8b459545e4c5ef8b88dd6faf4364bb47d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:5c:70:fd:d9:f1:89:a5:d8:68:68:00:5f:
                    d2:fb:b3:3f:dd:94:6a:24:1b:83:fa:80:eb:b9:47:
                    f0:b5:8c:39:6f:a1:91:ca:ad:aa:af:49:1a:f8:7b:
                    09:10:c5:6d:5c:ae:e8:ac:f7:97:fd:89:5f:f0:ee:
                    79:44:19:af:b8:b1:bc:56:23:9e:0c:47:a7:8c:0e:
                    92:4d:2e:a5:5a:45:8a:01:41:b2:cc:e5:fa:67:66:
                    35:7d:0e:4a:c3:ac:b3:2a:7f:75:f5:20:55:8f:bf:
                    28:f2:4d:2a:e5:80:94:ac:02:07:8c:04:ae:b6:d3:
                    c4:cb:47:92:25:d5:1d:c2:39:3e:34:5d:c2:8a:ed:
                    d5:18:ae:8c:a5:92:3f:32:91:da:24:45:03:83:90:
                    a4:1c:36:dc:6f:9e:cc:ab:64:af:a4:d4:20:ba:a4:
                    08:40:f5:55:0e:05:5a:e0:d4:6d:9f:6b:ee:55:9d:
                    44:90:40:9c:d1:ce:a0:87:ee:9d:50:32:3c:d7:66:
                    ea:f6:47:1b:21:f7:1a:0a:20:63:9e:40:ea:e8:d0:
                    dd:57:1e:a8:15:8a:2d:dd:57:0d:df:07:18:5c:eb:
                    e0:da:cc:66:fa:a7:39:2e:95:93:7d:de:c0:bb:50:
                    46:ca:77:f4:53:96:11:f7:62:ed:44:8d:d2:dc:cd:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:78:FC:8B:45:95:45:E4:C5:EF:8B:88:DD:6F:AF:43:64:BB:47:D6
            X509v3 Authority Key Identifier:
                keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ab:dd:11:86:96:b3:dd:51:80:cd:a8:97:cb:eb:13:2d:17:
         91:20:b4:76:84:72:16:d9:82:11:d6:26:98:0e:8b:2f:67:3b:
         82:39:ca:cd:fd:0e:3a:d1:e6:b7:cf:0d:99:83:13:0e:8f:4d:
         d2:11:f7:58:3a:c3:13:38:07:0e:cf:1a:b7:10:c6:b8:7b:e3:
         9e:4f:eb:8e:ab:7e:08:61:3e:ac:56:26:e4:67:fa:58:b0:d6:
         67:3d:82:34:d3:dd:67:1b:a2:dd:10:09:f8:db:05:3a:0f:9a:
         3a:62:d0:20:c9:c8:73:7d:96:fd:22:91:5f:45:6e:26:bc:57:
         63:0a:1b:c1:15:ee:1b:ed:b6:10:a2:8b:f3:83:83:4e:d9:6c:
         ec:2a:3b:09:f3:3c:23:8d:cd:6e:e2:9b:2d:e2:75:2e:0e:5d:
         81:57:49:63:b9:f7:b6:27:7c:e3:21:5e:4d:8e:7e:25:c7:21:
         64:95:83:ed:89:ca:65:02:6d:1f:0b:a7:a1:42:71:04:6b:5d:
         74:90:a8:49:6b:62:d2:91:d7:c1:af:2b:00:2b:05:d8:30:62:
         e4:31:8d:f7:76:2f:8a:e7:3b:c8:7c:ec:b1:cb:06:06:7a:5b:
         2d:03:62:7e:b2:02:bf:42:5c:82:22:6f:e8:00:71:a4:99:33:
         ad:83:0a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:49:02 2026 by rpki-client